Read env.npm_package_from for npm 7

bin.js

@@ -44,16 +44,17 @@ if (napi.isNapiRuntime(rc.runtime)) napi.logUnsupportedVersion(rc.target, log)
 
 var pm = whichPmRuns()
 var isNpm = !pm || pm.name === 'npm'
+var origin = util.packageOrigin(process.env, pkg)
 
 if (!isNpm && /node_modules/.test(process.cwd())) {
   // From yarn repository
 } else if (opts.force) {
   log.warn('install', 'prebuilt binaries enforced with --force!')
   log.warn('install', 'prebuilt binaries may be out of date!')
-} else if (!(typeof pkg._from === 'string')) {
+} else if (typeof origin !== 'string') {
   log.info('install', 'installing standalone, skipping download.')
   process.exit(1)
-} else if (pkg._from.length > 4 && pkg._from.substr(0, 4) === 'git+') {
+} else if (origin.length > 4 && origin.substr(0, 4) === 'git+') {
   log.info('install', 'installing from git repository, skipping download.')
   process.exit(1)
 } else if (opts.compile === true || opts.prebuild === false) {

util.js

@@ -87,6 +87,19 @@ function tempFile (cached) {
   return cached + '.' + process.pid + '-' + Math.random().toString(16).slice(2) + '.tmp'
 }
 
+function packageOrigin (env, pkg) {
+  if (env.npm_package_from) {
+    // npm 7: metadata is exposed to environment by arborist
+    // TODO: seems undefined atm (npm 7.0.2)
+    return env.npm_package_from
+  }
+
+  if (pkg._from) {
+    // npm <= 6: metadata is stored on disk in node_modules
+    return pkg._from
+  }
+}
+
 exports.getDownloadUrl = getDownloadUrl
 exports.getApiUrl = getApiUrl
 exports.getAssetUrl = getAssetUrl
@@ -95,3 +108,4 @@ exports.cachedPrebuild = cachedPrebuild
 exports.prebuildCache = prebuildCache
 exports.npmCache = npmCache
 exports.tempFile = tempFile
+exports.packageOrigin = packageOrigin